What is DTLS – Datagram Transport Layer Security?

Datagram Transport Layer Security

Datagram Transport Layer Security (DTLS) is a protocol used to secure data sent over UDP. It builds on TLS, which is used to protect web traffic, but works better for real-time communication such as VoIP and video calls.

DTLS vs TLS: Why It Matters

TLS runs over TCP. This creates a connection before any data moves, which adds delay. In contrast, DTLS uses UDP to send data without setup time. That makes it a better choice for voice and video, where low latency matters.

DTLS protects against eavesdropping, spoofing, and tampering. It encrypts each message, checks its integrity, and confirms the sender.

How 3CX Uses DTLS

3CX uses DTLS as part of its WebRTC call setup. When you place a browser-based call, DTLS handles the handshake and exchanges the encryption keys. After the setup completes, SRTP encrypts the media stream.

This setup keeps calls private and secure. and open standards power everything directly in the browser.

Why 3CX Uses DTLS

DTLS is required by the WebRTC framework. That makes it a natural choice for 3CX’s browser-based voice and video tools. It helps meet the growing demand for secure communication without adding layers of complexity for the user.

3CX also keeps the handshake local to the browser and server, so no third-party services handle encryption. This gives companies more control over their data and avoids handing off sensitive communications to external vendors.

Real-World Use in 3CX

Consider a remote sales meeting running in the 3CX Web Client. When the session begins, DTLS sets the encryption keys in the background. The users don’t see any prompts, popups, or delays. Once DTLS completes the handshake, SRTP encrypts the voice and video. No one can intercept, modify, or replay the call.

This applies across departments. Whether it's HR conducting interviews or support agents handling sensitive customer calls, DTLS ensures no one can listen in.

Broader Use of DTLS

While DTLS isn’t limited to VoIP, its main role in 3CX is to protect WebRTC browser calls. It also secures online games, VPN tools, and messaging platforms that rely on UDP. These services all require fast, encrypted delivery.

Open standards power everything directly in the browser.

Further reading

Last Updated
This document was last updated on 4 July 2025
https://www.3cx.com/voip/dtls/